System and method of identifying internet-facing assets

A computer-readable storage device storing instructions that, when executed by a processor, cause the processor to perform operations including:

• receiving a seed at a computing device;
• identifying, based on first domain name system (DNS) data, first border gateway protocol (BGP) data, first whois data, or a combination thereof, a plurality of first internet-facing assets related to the seed;
• identifying, based on second DNS data, second BGP data, second whois data, or a combination thereof, a plurality of second internet-facing assets related to at least one of the plurality of first internet-facing assets;
• generating a graphical user interface (GUI) that includes a list of internet-facing assets related to the seed, wherein the list includes the plurality of first internet-facing assets and the plurality of second internet-facing assets;
• receiving input via the GUI, the input indicating that a particular internet-facing asset is to be added to a scanning list;
• scanning the particular internet-facing asset;
• and
• generating an alert in response to determining, based on scanning the particular internet-facing asset, that the particular internet-facing asset violates a policy.

An apparatus comprising:

• a processor;
• and
• memory storing instructions that, when executed by the processor, cause the processor to perform operations including:
• receiving a seed at a computing device;
• identifying, based on first domain name system (DNS) data, first border gateway protocol (BGP) data, first whois data, or a combination thereof, a plurality of first internet-facing assets related to the seed;
• identifying, based on second DNS data, second BGP data, second whois data, or a combination thereof, a plurality of second internet-facing assets related to at least one of the plurality of first internet-facing assets;
• generating a graphical user interface (GUI) that includes a list of internet-facing assets related to the seed, wherein the list includes the plurality of first internet-facing assets and the plurality of second internet-facing assets;
• and
• accessing at least one of the plurality of first internet-facing assets or the plurality of second internet-facing assets based on one or more proxy servers to simulate requests from different geographic regions, different domains, different user agents, or a combination thereof.